6407 Informational message from a firewall-control product
Recorded as an informational message from a third-party product that controls Windows Firewall filtering. It is a supporting event conveying product-specific messages.
Overview
The subcategory is Audit Other System Events. It conveys an informational message from a product that registered firewall control (see 6406). The message format is product-dependent in the original docs, and the content varies by the registered product.
How it is triggered
- When a product controlling firewall filtering emits an informational message.
Security review points
- It is a product-dependent informational event with low standalone security value. Confirm the product controlling filtering is as expected, together with registration 6406 and failure 6408.
Notes for log review
- Being product-dependent, the content varies by environment. Treat it as an aid to understanding the filtering-control product’s behavior.
Key fields
| Field | Meaning |
|---|---|
| Product message | The notification content from the product |